Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa
File: e32e9d70-77da-4d7f-838c-cace7dac9464.roa (raw, json)
Hash identifier: eXELtA4xhs7ZkrFs+eGsY1uM5oRbdWSMXt8or+uicLw=
Subject key identifier: 3C:00:4E:FA:0E:A7:FE:43:55:80:27:1D:BF:CC:71:50:2D:72:18:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D38562BB12805AE22E5F0DE22CFE7717C8F9747
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa
Signing time: Sun 26 Oct 2025 01:00:36 +0000
ROA not before: Sun 26 Oct 2025 01:00:36 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.231.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:38:56:2b:b1:28:05:ae:22:e5:f0:de:22:cf:e7:71:7c:8f:97:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 01:00:36 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=b0663f70c2a5b6ed83b8da4f8bdd62aaf9e339b4edcb05872c1e26f493bb8126, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:f7:0f:d2:dc:92:09:dc:f2:a7:91:8b:99:
1b:9b:fc:57:11:d2:b3:70:21:4f:46:c7:7f:28:4e:
e1:5d:79:ab:aa:98:22:c0:86:db:35:80:e6:39:39:
9e:a4:33:28:83:fd:db:a3:53:f4:02:1e:c1:a3:f7:
34:8e:6b:ba:24:75:ba:14:3b:dd:f1:71:84:a6:8b:
1d:84:fb:fa:88:f1:31:57:cb:d7:ef:25:2e:72:77:
1a:83:38:56:a7:5d:e8:aa:32:af:13:b8:6b:70:5f:
66:93:70:16:eb:79:ba:a5:14:68:af:c7:82:5d:c8:
30:d8:40:7b:38:ab:1c:a8:7d:70:74:50:a1:4e:3f:
af:62:b9:00:dc:3f:43:05:4b:d8:f0:78:66:61:eb:
cc:e3:df:e6:45:4d:66:fd:a1:04:3b:e4:bb:88:97:
04:3c:57:6b:c5:3b:fb:cf:9a:d8:76:6a:39:6a:30:
dc:db:6f:d4:75:84:f4:9a:fe:e7:f5:5d:87:b6:bc:
c8:ae:73:f0:bc:ec:ef:0a:a7:64:e9:30:d7:52:b3:
23:98:99:63:1c:22:a7:5a:6f:07:d0:90:59:a4:aa:
8c:03:e8:e2:60:4a:72:15:8f:02:9d:9c:aa:48:72:
4f:38:e8:ef:bd:58:35:01:65:28:8b:39:40:c5:86:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:4E:FA:0E:A7:FE:43:55:80:27:1D:BF:CC:71:50:2D:72:18:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.231.96.0/19
Signature Algorithm: sha256WithRSAEncryption
21:ac:3f:8e:29:4a:58:02:36:b9:9f:c9:0e:94:b7:ab:58:ee:
08:e7:49:36:42:90:df:0f:ac:52:ba:b8:8e:fa:48:d2:ac:fb:
ac:d4:f8:e1:3e:e3:66:8e:f2:94:76:c3:00:f4:6f:25:53:83:
c7:61:28:71:33:90:7d:ac:44:95:c0:ea:13:85:69:6a:95:3b:
45:48:78:cf:ab:ec:09:91:a5:f7:59:c0:3c:9f:93:66:7d:ff:
3e:f3:49:1c:b9:42:7d:c0:27:a5:78:14:70:ae:f5:d5:44:02:
59:a4:02:90:67:50:85:89:ff:83:11:7d:ff:91:69:22:4a:31:
78:d2:2b:ff:2f:e5:ba:03:a0:4d:28:87:97:b5:77:62:de:bc:
88:71:c3:67:f6:f4:6d:1d:d5:87:7a:15:0d:d2:c7:1b:bb:66:
54:25:64:29:69:3f:ee:2c:05:a3:e9:c5:29:4b:ce:18:15:ff:
0d:f6:0f:d1:e7:f4:ca:7b:89:bf:e0:04:a8:91:72:2b:66:2e:
e1:47:77:77:e8:1d:55:8b:11:f5:a2:3a:4a:b9:c4:a2:2b:ad:
9e:8a:49:3f:78:01:fc:3c:1e:7a:39:4a:4d:7f:f3:a7:27:fd:
3f:73:d9:5d:a3:59:85:cd:e7:a7:09:8b:7d:39:fa:dc:d0:3d:
49:58:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:04 2025 by rpki-client